Just a thought as I'm working on some reporting with this new information. Given that a particular vulnerability is listed as "Fixed," what purpose does the nearby field "IP Status" serve? In my entire report, the only entry in this field is "host scanned, found vuln". Maybe in a larger sense, the host is vulnerable, but in the context of this vulnerability, isn't it fixed, and therefore the is no longer subject to it? That's why the "Fixed" field is confusing.